policy-default: Use libsmack to check client label